Overview

overview

10

Static

static

7

Document P....7.apk

android-10-x64

10

Document P....7.apk

android-11-x64

6

Document P....7.apk

android-9-x86

10

Analysis

  • max time kernel
    187493s
  • max time network
    131s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    13-12-2022 11:08

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Document PDF Scanner_8.3.7.apk

  • Size

    9.7MB

  • MD5

    d647a07d7492da4dfc2d5a0165fdb044

  • SHA1

    deaf44286b05f93a079dbddfc52013f7f114015e

  • SHA256

    fc303334334b87655463ccbc523da805e4b30085e0b690f5f48637f872f0a676

  • SHA512

    f1ef534fffba4bc934b6f4f344db1fbda22d2522c40acc5c3b9313083886388e4eb9cbcb1b0b9b7077e2e7504e648ef1e3924ab61cf0d1a3e1f83c3b329c6cd9

  • SSDEEP

    196608:N+GCjxVA0s8tWLJiV8/VQjga2lKOTA9MAdRPWn8WGZ:oZkXNFwOTAF08We

Score
10/10
jokerinfostealertrojan

Malware Config

Extracted

Family

joker

C2

http://sightly.oss-ap-northeast-1.aliyuncs.com/either

Grant permission to use all features

https://cxjus.oss-ap-southeast-1.aliyuncs.com/af2

https://cxjus.oss-ap-southeast-1.aliyuncs.com/fbhx

Signatures

  • joker

    Joker is an Android malware that targets billing and SMS fraud.

    infostealertrojanjoker
  • Loads dropped Dex/Jar 4 IoCs

    Runs executable file dropped to the device during analysis.

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs
  • Reads information about phone network operator.

Processes

  • com.hddoc.hink
    1⤵
    • Loads dropped Dex/Jar
    PID:4830

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.hddoc.hink/app_qinhd/nearby
    Filesize

    5KB

    MD5

    4a9788fc71243aee107a17d86aad635e

    SHA1

    7a710267fb5fdfc01542feff78748c041f5f2a40

    SHA256

    1a586e5f6da6d824a163b7c954f603ce146be866d3e0fad0f27c7de092641a7b

    SHA512

    e73e132ce909835855987d9f8c2a0306f645e77b27dd1d9077450d6f162f6e8d9d6e7de2a3cbe4ebecb6dc0db62ed3cb7e43277870282aa5d6e0bc0b19f2dc9f

    Download Submit

  • /data/user/0/com.hddoc.hink/app_qinhd/nearby
    Filesize

    5KB

    MD5

    4a9788fc71243aee107a17d86aad635e

    SHA1

    7a710267fb5fdfc01542feff78748c041f5f2a40

    SHA256

    1a586e5f6da6d824a163b7c954f603ce146be866d3e0fad0f27c7de092641a7b

    SHA512

    e73e132ce909835855987d9f8c2a0306f645e77b27dd1d9077450d6f162f6e8d9d6e7de2a3cbe4ebecb6dc0db62ed3cb7e43277870282aa5d6e0bc0b19f2dc9f

    Download Submit

  • /data/user/0/com.hddoc.hink/app_qinhd/nearby
    Filesize

    5KB

    MD5

    4a9788fc71243aee107a17d86aad635e

    SHA1

    7a710267fb5fdfc01542feff78748c041f5f2a40

    SHA256

    1a586e5f6da6d824a163b7c954f603ce146be866d3e0fad0f27c7de092641a7b

    SHA512

    e73e132ce909835855987d9f8c2a0306f645e77b27dd1d9077450d6f162f6e8d9d6e7de2a3cbe4ebecb6dc0db62ed3cb7e43277870282aa5d6e0bc0b19f2dc9f

    Download Submit

  • /data/user/0/com.hddoc.hink/app_webview/Web Data
    Filesize

    112KB

    MD5

    b663831f8cc130493476d94f2d7a5330

    SHA1

    043a1956ab8e40821d67043f8a9110a8eb36fb93

    SHA256

    c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

    SHA512

    e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

    Download Submit

  • /data/user/0/com.hddoc.hink/app_webview/Web Data-journal
    Filesize

    1KB

    MD5

    90bbb9d25273b7799ce13da7b8749cf7

    SHA1

    12e3e09ba1e49aa14dcf6e94906d1e39986c2ad3

    SHA256

    b590f3e37ebb4565b11b5453caa443ba48bbfee43a737a6eeb71d31dd88e4115

    SHA512

    69dd122f2f902ef149f78690b171c4011de6826ec15f961a50be2d13106d892631cfe8717b1d5074cabc067860cf8ce35d17fa55020b2f604e1d838f7677dcf7

    Download Submit

  • /data/user/0/com.hddoc.hink/app_webview/metrics_guid
    Filesize

    36B

    MD5

    dae2e655dc4647676977129317943999

    SHA1

    ad2dfcab2365d3e84372ff8a85c58635dc2a65a2

    SHA256

    1a490c66ec9a0f19d43fd1b55f0387432b82c5c84490fbb6617b4a7b1e7b0636

    SHA512

    5386d6c9c8c4cfc83d06eba99130dc4535fc15ca825e91272224ca42792cd43daa52f341c68645a785ff09f4d7d6ce82833c6d62cf0185035a3c61c255bc8a71

    Download Submit

  • /data/user/0/com.hddoc.hink/cache/WebView/Crashpad/settings.dat
    Filesize

    40B

    MD5

    060ee00b298a0ebbfc41ea7b28f8ef10

    SHA1

    69c355d42f8c98a027b040ec266b911ecbf9d483

    SHA256

    dca3e4f6a3c839b5f6ae9cb56cfa458594289ee7ffcbab7398e763b9ca13048a

    SHA512

    ae614e58078a616df0742ad0561fa513827a1967fa7691e438495558eb4b44d6a98084245fa96da8ff7f3a1ff6c75a3d6309a6950c49032bea32404c05ece6ef

    Download Submit

  • /data/user/0/com.hddoc.hink/cache/org.chromium.android_webview/Code Cache/js/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    Download Submit

  • /data/user/0/com.hddoc.hink/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
    Filesize

    96B

    MD5

    7be2f08076af3bd13049f5470a4c05bb

    SHA1

    4d592697f8f4140ad111ccf8738283fdb7b2af3c

    SHA256

    66ad1573d8eb8e036ca2732af19a5e7930c38c0220d157386c1b26a67520f6ed

    SHA512

    2725b56f35abf7072fad540727469fd9926c59f3f2aa956473921489b3cd207b74d49e0ec231659fa684968c6ad3b932f4d3075e336efacf8064d07dcc2db45a

    Download Submit

  • /data/user/0/com.hddoc.hink/files/beaming
    Filesize

    9KB

    MD5

    6d13d7c94d8a2d5184182f0dff473593

    SHA1

    c84e555455310cd4632039f5b80104094e15908e

    SHA256

    b1df50f31196de33f10a206b796cb7a8ba1c25c77b84d081ba2142ea4ecbcd06

    SHA512

    ecf76c2003bd3ab75a5fb635d9ed539a96bc4a520afb8da141f6348d0e3d4a354b032f9ba0496ec75f35c4f5f4ab15df6dae8db0f241b7764a204ecc62029b43

    Download Submit

  • /data/user/0/com.hddoc.hink/files/beaming
    Filesize

    15KB

    MD5

    843cafaf40c65eec713a7ff2a135a9c8

    SHA1

    92259ba6953fb90c86c143c31b4c806be85ac99c

    SHA256

    4c3fd5b304f20c52594f18b6759477208edd72331a03c81e6d2fed45ab3b35a8

    SHA512

    beedef02ad85eebb50412732405b8138bcfcc0d2544915bc91c0165a7477651d14b707ab9cff74ee16728e8277b9b1bb21d1b4b34c50c0ab7820f080740267e7

    Download Submit

  • /data/user/0/com.hddoc.hink/files/ionsxg
    Filesize

    22KB

    MD5

    0d4e0388ddad6dfab2e1d43c0c339ad0

    SHA1

    a097d295281c4796030ad3a8d6a24cefc8ac53b3

    SHA256

    409633ccb7463620e5f774ed0b466839f5aaa8f8005082af67bb7bbfbbf1a8b0

    SHA512

    381e7b5b19ff133c96550e860e66e5d61ee75bf73be268d7eeffdd5200b59e293ac979a07a303eb3d2e9b4f6b20acdb0335398f0b13c4c64a48b184c8e273d3a

    Download Submit

  • /data/user/0/com.hddoc.hink/files/ionsxg
    Filesize

    46KB

    MD5

    25b621b14e9bdb8d3009a25ac15b2997

    SHA1

    fab787ef17d4b1fd8ba506ac433c90933685972b

    SHA256

    d1491805efe37e08dd402d82d7e03b74c27dd21b00963aaebf1eba373d803b56

    SHA512

    be560e695ca2b63672381b47738c5ce9963ca1b2ad3ad42c723e464d0f48ed6d67fb1b98197f597219e8272ba0c67a7d375ee05ef7d34f665dc4d3da58b69355

    Download Submit

  • /data/user/0/com.hddoc.hink/shared_prefs/WebViewChromiumPrefs.xml
    Filesize

    127B

    MD5

    6ef709b8536878951e87c29a1518fc2b

    SHA1

    24376c70b00152501b3d98df61fa7db435339172

    SHA256

    10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

    SHA512

    96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9

    Download Submit

  • /data/user/0/com.hddoc.hink/shared_prefs/policy.xml
    Filesize

    113B

    MD5

    5252b4bc37fe2da3de6eca03403b4ace

    SHA1

    a17e255f70f1dfd4942d31dde9df85b051cc85dd

    SHA256

    2d3aaa2d1fb54c12660174ccad96c889b9b2f28ebeadd8fae6149ec48b1531b4

    SHA512

    d61cd07f8c15e1ff3773655051013fb03059df330b9b81bed1f1dd8a4319b5d0ad760b375114783ed2ad4a41a70c07a3330718ea1c53b2a0e905775e4a0aeeba

    Download Submit